CVE Watch14 de out. de 2026

CVE-2020-13777

GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authent

CVSS

7.4

Alta

EPSS

22.5%

p98

KEV

—

Exploit Today

0-100

Publicado: 4 de jun. de 2020 · Última mod.: 14 de out. de 2026 · CWE-327

EPSS · 30d

22.3%EPSS · 30 dias22.5%

2026-10-142026-11-11

Descrição técnica

GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3). The earliest affected version is 3.6.4 (2018-09-24) because of an error in a 2018-09-18 commit. Until the first key rotation, the TLS server always uses wrong data in place of an encryption key derived from an application.

Referências oficiais

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-1135725.9 MÉD

45.4%

——14CAI Content Credentials is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.1d CVE-2026-1181025.9 MÉD

40.9%

——12Use of a broken or risky cryptographic algorithm in SQL Server allows an unauthorized attacker to disclose information over a network.1d CVE-2026-1137636.3 MÉD

8.1%

——2Use of a broken or risky cryptographic algorithm in Windows DPAPI (Data Protection Application Programming Interface) allows an authorized attacker to elevate privileges locally.1d CVE-2026-112168—

0.0%

——0The Magistra software uses weak custom encryption, relies on an outdated compression algorithm to protect the database, and contains embedded secrets.3d CVE-2026-785376.8 MÉD

0.2%

——0IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 could allow a local attacker to obtain sensitive information due to the use of a weak cryptographic algorithm.2d CVE-2026-1186845.9 MÉD

8.2%

——2MONAI before 1.6.1 contains an insufficient integrity verification vulnerability in check_hash() that silently returns True when hash_val is None, with MD5 as the default hash type. Attackers performing man-in-the-middle or registry compromise can substitute bundles, datasets, or model archives downloaded without hashes, enabling malicious file delivery and potential code execution.7d